Red Hat OpenStack Platform 16.2/openstack-glance

Red Hat · Package

10 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
OpenStack Glance Server-Side Request Forgery (SSRF)CVE-2017-7200 · GHSA-J6MR-CM6X-H6JGVersion ranges need review.	glance Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/openstack-glance	PyPIRed Hat	Medium	Fix reported	2026-07-07
OpenStack Glance Bypass the storage quota and Denial of service CVE-2014-9623 · GHSA-J4MH-9WQ6-8RG6Version ranges need review.	glance Red Hat OpenStack Platform 13 (Queens)/openstack-glance	PyPIRed Hat	Medium	Fix reported	2026-07-07
OpenStack Glance Denial of service by creating a large number of images CVE-2015-1881 · GHSA-4JP4-3C62-R8JVVersion ranges need review.	glance Red Hat OpenStack Platform 13 (Queens)/openstack-glance	PyPIRed Hat	High	Fix reported	2026-07-02
OpenStack Glance Denial of service by creating a large number of imagesCVE-2014-9684 · GHSA-H737-Q6G6-8WR6Version ranges need review.	glance Red Hat OpenStack Platform 13 (Queens)/openstack-glance	PyPIRed Hat	High	Fix reported	2026-07-02
OpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerabilityCVE-2022-4134 · GHSA-5GP5-VXJ6-4257Version ranges need review.	glance Red Hat OpenStack Platform 13 (Queens)/openstack-glance	PyPIRed Hat	Low	No fix reported	2026-07-01
OpenStack Glance Signature Verification BypassCVE-2015-8234 · GHSA-WMHW-FVG9-87FCVersion ranges need review.	glance Red Hat OpenStack Platform 13 (Queens)/openstack-glance	PyPIRed Hat	Medium	No fix reported	2024-11-26
openstack-glance: openstack-glance: SSRF via web-download import due to empty default host filtersCVE-2026-71196	Red Hat OpenStack Platform 16.2/openstack-glance Red Hat OpenStack Platform 17.1/openstack-glance	Red Hat	High	No fix reported	Not recorded
openstack-glance: openstack-glance: SSRF blocklist bypass via hostname-to-IP resolution gap in web-downloadCVE-2026-71197	Red Hat OpenStack Platform 13 (Queens)/openstack-glance Red Hat OpenStack Platform 16.2/openstack-glance	Red Hat	Medium	No fix reported	Not recorded
openstack-glance: openstack-glance: SSRF via location API missing host validationCVE-2026-71198	Red Hat OpenStack Platform 16.2/openstack-glance Red Hat OpenStack Platform 17.1/openstack-glance	Red Hat	High	No fix reported	Not recorded
openstack-glance: openstack-glance: Server-Side Request Forgery via image locations manipulationCVE-2026-51772	Red Hat OpenStack Platform 13 (Queens)/openstack-glance Red Hat OpenStack Platform 16.2/openstack-glance	Red Hat	Medium	No fix reported	Not recorded